You want to give all managers the ability to view and edit a certain file. To do so$,$ you need to edit the discretionary access control list $($DACL$)$ associated with the file. You want to be able to easily add and remove managers as their job positions change.

What is the BEST way to accomplish this?

answer

Create a security group for the managers. Add all users as members of the group. Add the group to the file's DACL.

Add each user account to the file's DACL.

Create a distribution group for the managers. Add all users as members of the group. Add the group to the file's DACL.

Add one manager to the DACL that grants all permissions. Have this user add other managers as required.